JP4285368B2 - IC card, authentication system, and authentication method - Google Patents

Description

  The present invention relates to an IC card equipped with a fingerprint sensor.

  An IC card (smart card) is a card equipped with an IC (integrated circuit) chip, and has a higher information capacity, improved security (preventing counterfeiting and unauthorized use), and multiple applications compared to a magnetic stripe card. And host load reduction (offline processing is possible). For this reason, in addition to credit cards and cash cards, electronic money, electronic commerce, medical health, transportation such as railways and buses, and entry / exit management of buildings have begun to be actively performed. Accordingly, an IC card with a personal authentication function equipped with a fingerprint sensor has been proposed for the purpose of further improving security (information protection, access restriction, etc.).

As such an IC card with a personal authentication function, for example, a technique described in Patent Document 1 is known. There is also known an electronic payment system in which a bar code is displayed on a display of a mobile phone and a bar code reader reads the bar code to perform payment (see, for example, Patent Document 2).
JP 2004-64650 A JP 2002-24730 A

However, the present inventor has found that although the technique described in the above-mentioned patent document has a security function, its security is insufficient.
The present invention has been made in view of the above-described circumstances, and an object thereof is to propose an IC card capable of obtaining higher security.

The present inventor has conceived the present invention having the following means in order to realize an IC card having higher security than the technique described in the above-mentioned patent document.
That is, the IC card of the present invention includes a sensor that detects information, a display element, a control unit that displays an image on the display element based on the detection of the information by the sensor, and the display that is displayed on the display element. see contains an antenna for receiving a display end signal to terminate the display of the image, wherein the control unit has a function of erasing the image, the display end signal at the antenna is received The image is displayed on the display element only during the period up to.
In addition, the IC card of the present invention includes a sensor, a data processing unit that extracts first information captured by the sensor, a memory that stores second information, and a comparison result between the first information and the second information. wherein a control unit for displaying an image on the display device, seen including a an antenna for receiving a display end signal for erasing the image after displaying the image, function the control unit, to erase the image on the basis of The image is displayed on the display element only until the display end signal is received by the antenna .
In the IC card of the present invention, the display element is an electrophoretic display device, the sensor is a fingerprint sensor, the control unit has a function of erasing the image, and the image is It is an encrypted image, and further includes a solar cell.
The authentication system of the present invention includes an IC card and an external device, and a sensor for detecting information by the IC card , a display element, and an image on the display element based on the detection of the information by the sensor . A control unit that performs display, and an antenna that receives a display end signal for erasing the image displayed on the display element, and the control unit has a function of erasing the image. The image is displayed on the display element only until the display end signal is received by the antenna, and the external device has a reader for reading the image displayed on the display element. After the image is read by the external device, the display end signal is transmitted to the antenna.
In the authentication system of the present invention, the IC card includes a fingerprint sensor.
The authentication system of the present invention is characterized in that a first image is read by a reader, and after reading the first image, a signal for erasing the first image is transmitted.
The authentication system of the present invention is characterized in that after reading the first image, data of a second image for rewriting the first image is transmitted.
The authentication method of the present invention includes a step of reading and receiving an encrypted image displayed on a card by a reader, and a step of transmitting a signal for ending the display of the encrypted image. To do.
The authentication method of the present invention includes a step of extracting first information from a sensor, a step of comparing the first information with second information stored in a memory, and the first information and the second information. and displaying the encrypted image according to the result of comparison, a step of reading the encrypted image, comprising: receiving that originate display end signal based on the completion of the reading process at the antenna, of the encrypted image Erasing the display based on the display end signal.
In addition, the authentication method of the present invention further includes a step of transmitting information on a different encrypted image to the antenna after reading the encrypted image, and rewriting the encrypted image, wherein the sensor is a fingerprint sensor. It is characterized by being.
Further, the IC card of the present invention includes a capacitive fingerprint sensor and a display element, and the display element displays an encrypted image that can be read by an external device.
As described above, by providing the capacitive fingerprint sensor, the personal authentication of the IC card user is performed, so that the user can be limited and the abuse of the IC card can be prevented.
Furthermore, the IC card of the present invention includes not only the above personal authentication but also a display element that displays an encrypted image, and an image displayed by the display element can be read by an external device. Therefore, information communication can be performed between the IC card and the external device through the encrypted image. Therefore, not only security by fingerprint authentication can be obtained, but also information communication can be performed through an encrypted image, so that an IC card having higher security can be realized.

  On the other hand, means for performing information communication includes means for performing information communication electromagnetically via an antenna provided in each of the IC card and the external device. In the present invention, such an electromagnetic means is not used, and the display device of the IC card displays an encrypted image, and information communication is performed by an external device reading the image. Thereby, the user of the IC card can visually confirm whether or not an image is displayed on the IC card, and the external device can read it. On the other hand, visual confirmation cannot be performed in the case of electromagnetic means. Therefore, according to the present invention, the image can be read by the external device after the user visually confirms the presence or absence of the image.

In the IC card of the present invention, the display element is an electrophoretic display device.
Here, in the electrophoretic display device, a driving element such as a TFT applies a predetermined voltage for a predetermined time, so that an image can be held without applying a voltage thereafter. That is, it is a display element having image storage and display memory properties.
By providing such an electrophoretic display device, power consumption for displaying an image can be reduced, so that low power consumption can be realized and an IC card having display memory properties can be realized.

In addition, the IC card of the present invention further includes a control unit, and the control unit controls the capacitive fingerprint sensor and the display element.
In this way, the effect of the IC card described above can be obtained, and the capacitive fingerprint sensor and the display element can be controlled by the control unit.

In the IC card of the present invention, the control unit compares the extracted fingerprint pattern extracted from the capacitive fingerprint sensor with an authentication fingerprint pattern stored in advance.
In this way, the effect of the IC card described above can be obtained, and personal authentication can be performed based on the result of comparing the extracted fingerprint pattern and the authentication fingerprint pattern.

In the IC card of the present invention, the control unit deletes the encrypted image displayed by the display element.
As described above, the electrophoretic element has a display memory property. Therefore, the IC card can be invalidated by erasing the image on the display element after using the IC card. Thereby, since the afterimage in the electrophoretic display device can be erased, the misuse of the IC card due to the afterimage can be prevented, and an IC card having higher security can be realized.

In the IC card of the present invention, the control unit automatically updates the encrypted image.
Here, automatically updating the encrypted image means that the authentication image used between the external device and the IC card is rewritten when the use of the IC card is terminated.
In this way, every time the IC card is used, the encrypted image for authentication used between the external device and the IC card is rewritten, so that the next time the IC card is used, it is displayed once. The encrypted image displayed by the element and the encrypted image authenticated by the external device can be invalidated. Therefore, each time the IC card is used, the external device authenticates a new and different encrypted image, so that an IC card with higher security can be realized.

In the IC card of the present invention, the control unit stores a plurality of applications.
In this way, the effect of the IC card described above can be obtained, and a plurality of applications can be used by using the IC card.

In the IC card of the present invention, the control unit stores a plurality of the authentication fingerprint patterns.
In this way, the effect of the IC card described above can be obtained, and a plurality of users can use the IC card.

In the IC card of the present invention, the control unit stores the authentication fingerprint pattern that can be used for each of the plurality of applications.
In this way, the number of IC card users can be limited for each application. Thereby, the effect of the IC card described above, that is, an IC card with higher security can be realized.

In addition, the IC card of the present invention is further characterized by further comprising selection means for selecting any one of the plurality of applications stored in the control unit.
In this way, the effect of the IC card described above can be obtained, and since the selection means is provided, any one of a plurality of applications that can be used by the IC card can be selected.

The IC card according to the present invention further includes an external connection terminal connectable to the external device.
By providing the external connection terminal in this manner, information can be transmitted and received between the IC card and the external device through the external connection terminal.

Further, the IC card of the present invention is characterized by further comprising a solar cell.
By providing the solar cell in this way, the IC card can be driven using the power generated by the light irradiation. In addition, the solar cell has a function in which a current flows with light irradiation, that is, a so-called photosensor function. Therefore, an IC card having an optical switch that reacts to light irradiation can be realized.

(First embodiment of IC card)
Embodiments of an IC card according to the present invention will be described below with reference to the drawings.
FIG. 1 is a perspective view showing an IC card K1 according to the present embodiment, and FIG. 2 is a plan view showing the IC card K1.
The IC card K1 includes a substrate 50 formed by bonding two base materials such as plastic, a fingerprint sensor 10, and an electrophoretic display device (display element, hereinafter referred to as EPD) 11. And a connection IC terminal (external connection terminal) 12 and a switch (selection means) 13. In addition, an integrated circuit (control unit) such as an IC chip sandwiched between two plastic base materials is provided inside the substrate 50.
Next, with reference to FIG. 3 to FIG. 5, the main part constituting the IC card K1 will be described in detail.

(Fingerprint sensor)
FIG. 3 is a block diagram for explaining the processing unit 40 for processing information input from the fingerprint sensor 10, and FIG. 4 is a schematic diagram showing the configuration of the fingerprint sensor 10.
As shown in FIG. 3, the processing unit (control unit) 40 includes a data processing unit 41 that performs feature extraction of a fingerprint pattern (extracted fingerprint pattern) captured by the fingerprint sensor 10, and a specific fingerprint pattern (authentication fingerprint pattern). Controls the operation of the IC card K1, the memory 42 for storing various information such as the feature amount, the comparison unit 43 for comparing the feature amount extracted by the data processing unit 41 with the feature amount stored in the memory 42, and the like. And a control unit 44.

Also, as shown in FIG. 4, the fingerprint sensor 10 is a capacitance type, that is, detects a fingerprint pattern by measuring a capacitance that changes according to the distance between the fingerprint having an unevenness and the detection surface 10a. It is supposed to be. Such a capacitance-type fingerprint sensor 10 is easy to be thinned because no light source is required, and improves scratch resistance by appropriately selecting a surface protective layer (passivation film). There is a feature that can be.
The fingerprint sensor 10 has a sensor substrate 115, a plurality of scanning lines (not shown) formed in parallel to each other at a predetermined interval on the sensor substrate 115, and orthogonal to the scanning lines. Thus, a plurality of signal lines 116 formed in parallel with each other at a predetermined interval are provided.

A switching element (detection circuit) 112 configured by a transistor or the like is provided at a position corresponding to each of intersections of the plurality of scanning lines and the plurality of signal lines 116.
These scanning lines, signal lines 116, and switching elements 112 constitute an active matrix array 113. On the active matrix array 113, detection electrodes 111 are arranged in a matrix at positions corresponding to the switching elements 112. Is provided.
Each detection electrode 111 is covered with an insulating film (passivation film) 114 so as to cover the entire surface of the active matrix array 113, and the insulating film 114 can come into contact with the finger F of the user of the IC card K1. Yes.
As the active matrix array 113, a MOS transistor array formed on a semiconductor substrate, a thin film transistor (TFT) formed on an insulating substrate, or the like can be used.

In the fingerprint sensor 10 having such a configuration, when the finger F comes into contact with the detection surface 10a, there is a two-dimensionally distributed capacitance between the finger F and each detection electrode 111 arranged in a matrix. (C1, C2, C3, etc. in FIG. 4). By electrically reading out the two-dimensionally distributed capacitance values by the active matrix array 113, a fine uneven pattern (extracted fingerprint pattern) formed on the surface of the finger F can be detected. it can. In the fingerprint sensor 10 using the electrostatic capacity method, in order to avoid discharge destruction due to static electricity charged on the human body, the static electricity charged on the finger F is discharged before detection, and the potential of the finger F is changed to the switching element 112. It is essential that the potential be substantially the same as the ground (reference potential) G level. Furthermore, in order to detect each capacitance value stably, it is preferable to fix the potential of the finger F to a predetermined potential at the time of detection.
For this reason, an electrode different from the detection electrode, that is, a discharge electrode 120 for discharging static electricity charged on the human body is provided on the substrate 50 of the IC card K1.

(EPD)
FIG. 5 is a cross-sectional view showing a cross section of the EPD 11.
On a flexible EPD substrate 211e such as plastic, an electrode film 211d, an electrophoretic display layer 211c, an electrode film 211b, and a surface protective layer 211a for protecting the display portion are laminated. The surface protective layer 211a can be omitted.
The electrode film 211b is formed by forming an electrode on a transparent plastic film having excellent dimensional stability such as polyethylene terephthalate (PET), polyethylene naphthalate (PEN), and polyimide. The electrode film 211d is also formed by forming a similar base electrode, but transparency is not necessarily required. The electrode film 211b and the electrode film 211d are electrically connected by the vertically moving electrode 211f.
The electrode film 211b serves as a common electrode to which the same potential is applied over the entire surface, while the active film electrode or segment electrode is formed on the electrode film 211d as a drive electrode.

  The microcapsule 211 forming the electrophoretic display layer 211c has a composite shell of gum arabic / gelatin, urethane resin, urea resin, urea resin, etc. as a capsule shell, and the capsule shell is prepared by an interfacial polymerization method, in-situ method. Known microencapsulation techniques such as a polymerization method, a phase separation method, an interfacial precipitation method, and a spray drying method can be employed. Electrophoretic particles and a dispersion medium are enclosed inside. As the migrating particles, organic or inorganic particles (polymer or colloid) are used. For example, black pigments such as aniline black and carbon black, white pigments such as titanium dioxide, zinc white, and antimony trioxide, azo pigments such as monoazo, diisazone, and polyazo, isoindolinone, yellow lead, yellow iron oxide, and cadmium yellow Yellow pigments such as titanium yellow and antimony, azo pigments such as monoazo, disazo and polyazo, red pigments such as quinacridone red and chrome vermilion, phthalocyanine blue, indanthrene blue, anthraquinone dyes, bitumen, ultramarine blue, cobalt blue, etc. One or two or more of blue pigments, green pigments such as phthalocyanine green, and the like can be used. Dispersion medium is colorless or dyed water, alcohol solvents such as methanol, ethanol, isopropanol, butanol, octanol, methyl cellosolve, various esters such as ethyl acetate, butyl acetate, acetone, methyl ethyl ketone, methyl isobutyl ketone Such as ketones, aliphatic hydrocarbons such as pentane, hexane and octane, alicyclic hydrocarbons such as cyclohexane and methylcyclohexane, benzene, toluene, xylene, hexylbenzene, hebutylbenzene, octylbenzene and nonyl Aromatic hydrocarbons such as benzenes having a long chain alkyl group such as benzene, decylbenzene, undecylbenzene, dodecylbenzene, tridecylbenzene, tetradecylbenzene, methylene chloride, chloroform, carbon tetrachloride, 1,2-di Halogenated hydrocarbons such as Roroetan, can be used by blending a surfactant or the like alone or a mixture thereof such as carboxylic acid salts, or various other oils.

  In electrophoresis, the electrophoretic particles are charged positively or negatively in advance, and the dispersion medium and the electrophoretic particles are colored different from each other. For example, when titanium oxide, which is white particles, is positively charged and carbon black, which is black particles, is negatively charged, an electric field is applied to the two electrode films 211b and 211d so that the electrode film 211b is a negative electrode and an electrode film. When 211d becomes a positive electrode, positively charged white particles are drawn to the electrode film 211b side, and black particles are drawn to the electrode film 211d side. Therefore, by setting the electrode film 211b as a transparent electrode, the electrode film 211b side When observed from above, the portion appears white. Conversely, when the electrode film 211b is a positive electrode and the electrode film 211d is a negative electrode, positively charged white particles are drawn to the electrode film 211d side, and black particles are drawn to the electrode film 211b side. When observed from above the electrode film 211b, the portion looks black.

Since the EPD 11 has a large number of the above-described microcapsules 211, by controlling the electric field of each address electrode of the electrode films 211b and 211d, a desired character, number, or symbol is displayed with white and black pixels. be able to.
Note that when the microcapsule 211 is driven by an active matrix driving method, the electrode film 211d is independently patterned for each pixel as a pixel electrode, and includes a thin film transistor, a signal electrode, and a scanning electrode (not shown), and the electrode film 211b. Is a transparent common electrode uniformly formed on a light-transmitting substrate. In this case, if the electrode film 211b is a common electrode, the entire surface has the same potential (for example, the potential is set to zero). Therefore, by controlling the electric field of each address electrode on the electrode film 211d side (giving a positive or negative potential) Based on the principle described above, particles in the microcapsule 211 at the electrode position can be moved to display a desired image. Similarly, by using the electrode film 211d as a common electrode and controlling the electric field of each address electrode on the electrode film 211b side, the particles in the microcapsule 211 at the electrode position are moved to display a desired image. Also good.
In the case of time-division driving, the electrode films 211b and 211d are composed of transparent electrodes made of transparent conductors such as line-shaped ITO (Indium Tin Oxide) that are orthogonal to each other, and microelectrodes are formed in the region where both electrodes intersect. A capsule 211 is placed.
The driving method is not limited to the above-described one, and an optimal one may be selected according to the application. Further, various diameters of the microcapsule 211 can be adopted.

The connection IC terminal 12 is connected to a terminal provided in the external device when information is transmitted and received between the IC card K1 and an external device (not shown). The connection IC terminal 12 is connected to an IC chip provided in the IC card K1, and transmits and receives input / output signals between the external device and the IC chip.
The switch 13 selects and determines an application that can be used with the IC card K1. A plurality of such applications are displayed on the EPD 11. The application displayed on the EPD 11 is selected and determined by scrolling using the switch 13.
The switch 13 not only selects and determines an application, but also functions as a switch for switching the IC card K1 from the OFF state (power-off state) to the ON state (power-on state). It has become.

The IC chip incorporated in the IC card K1 includes a calculation circuit such as a CPU, a drive circuit such as a driver, and a storage circuit including a memory such as a ROM and a RAM. Such an IC chip functions as a control unit of the present invention.
By operating such a circuit, the operations of the fingerprint sensor 10 and the EPD 11 are controlled. Specifically, input signal determination in the fingerprint sensor 10 and display control of the EPD 11 are performed. In addition, communication with an external device that is input / output via the input from the switch 13 and the connection IC terminal 12 is performed. Further, as will be described later, the IC chip stores a plurality of applications using an IC card, a program corresponding to the application, and encrypted image information. In addition, the IC chip is configured to operate a program in accordance with communication with an external device or to display an encrypted image on the EPD 11. The IC chip also has a function of updating the encrypted image.

(Modification of IC card)
Next, a modified example of the IC card will be described.
FIG. 6 is a perspective view of an IC card K2 according to this modification. In this modification, the IC card K2 has a configuration including the solar battery 14.
In the solar cell 14, light energy is converted into electric energy when irradiation light enters from the outside of the IC card K 2. In addition, a charger (not shown) is provided inside the IC card K2, and the electric energy converted by the solar cell 14 is charged in the charger.

The solar cell 14 not only converts light energy into electrical energy, but also functions as a so-called photosensor in which a current flows with light irradiation. Thereby, the solar cell 14 is a switch for switching from the power-off state (power-off state) of the IC card K2 to the ON state (power-on state) by irradiating the IC card K2 with external light. It is supposed to function as well.
Moreover, such a solar cell 14 and a charger for charging electric energy are connected to an IC chip built in the IC card K2. Thereby, the IC chip processes the input signal from the solar cell 14 and supplies the electric energy charged in the charger to the EPD 11.

(Transactions using IC cards)
Next, transactions using the above IC card will be described.
In the present embodiment, the transaction will be described as an example using an ATM transaction in a financial institution such as a bank as an application. FIG. 7 is a flow chart when performing transaction business at ATM using the IC card of the present embodiment.
Next, transaction business will be described with reference to the flowchart.

First, the power of the IC card CPU is turned on (step S1).
In step S1, when the switch 13 is turned on, the fingerprint sensor 10 is touched, or external light is incident on the solar cell 14, the CPU is turned on.

Next, fingerprint authentication is performed (step S2).
The step S2 is performed when the user touches the fingerprint sensor 10 with the finger F as shown in FIG. If the user's fingerprint does not match the preset fingerprint as a result of the fingerprint authentication (step S3), the authentication is impossible. In this case, a display indicating that authentication is not possible is performed on the EPD 11. Then, the use of the IC card ends.
On the other hand, as a result of fingerprint authentication in step S2, if the user's fingerprint matches a preset fingerprint, the IC card is enabled (step S4). This makes it possible to continue to conduct ATM transactions.

  Next, the EPD 11 displays an encrypted image that can be read by the external device (step S5). Thereby, the encryption information is displayed on the EPD 11. Here, examples of the encryption information include a login password, a personal identification number, and the like, an encrypted two-dimensional barcode, and a contrast image. Such an image cannot be deciphered even by a third party including the user, but can be deciphered only by an external device. Further, the user can recognize only that the image is displayed on the EPD 11, that is, the presence or absence of the image.

Next, the reader of the external device reads the image (step S6).
Here, the user reads the image by bringing the EPD 11 displaying the encrypted image close to the reader.
Here, since the user can confirm that the encrypted image exists in the EPD 11, the reader can reliably read the encrypted image into the reader.

Next, the external device decrypts the encrypted image read by the reader, and further determines whether or not the IC card can be used for use authentication (step S7).
Here, when use authentication is impossible (step S8), use is impossible. In this case, a display indicating that authentication is not possible is performed on the EPD 11. Then, the use of the IC card ends.
On the other hand, if it is available, account confirmation is performed (step S9). This makes it possible to continue to make ATM transactions.

If the account is not available as a result of the account confirmation in step S9 (step S10), the EPD 11 is displayed as unavailable. Then, the use of the IC card ends. Moreover, in the said step S10, you may display on EPD11 the reason which became unavailable. For example, an indication that the account is closed, an indication that the balance is insufficient, and the like may be displayed.
On the other hand, if the account is available as a result of the account confirmation, the transaction is started (step S11). Further, when the transaction ends (step S12), the IC card becomes invalid (step S13).

In step S13, a password is transmitted from the external device to the IC card. The password is a password required when the IC card is used next time, and is different from the password used this time. Therefore, every time an IC card is used, a different password is used for authentication.
Further, such a password is issued by an authentication system in an external device, and is stored and managed in the authentication system, and the same password is stored and managed in a memory in the IC card. Yes. Such passwords are defined by a password table, and a number of passwords exceeding about 10,000 patterns are set in the password table. The password is issued every time the transaction ends.
Also, such a password is transmitted to the IC card as a transmission signal by the external device at the end of the transaction. When the IC card receives the transmission signal, the password is stored. Note that the transmission / reception of the password may be performed via an external connection terminal, or may be performed via an antenna such as a loop coil built in the IC card.

Next, the display image displayed by the EPD 11 is erased (step S14).
Here, the EPD 11 has a memory property for storing a display image. Therefore, unless the image on the EPD 11 is erased, the image remains displayed as it is, and there is a risk of abuse by a third party. In order to avoid such a risk, the display image of the EPD 11 is erased.
When the above series of operations is completed, the use of the IC card is terminated.

  In using such a series of IC cards, it is possible to prove that the user is the user by performing fingerprint authentication. Further, only when it is specified that the user is the person himself / herself, information communication using the encrypted image is performed, and bank transactions are possible. Furthermore, since the encrypted image is updated each time a transaction is made, a transaction is performed using an encrypted image that is different for each transaction. Here, if the encrypted image is the same image every time, if this image is stolen, an impersonation act is easily performed, but since it is updated for each transaction, the misuse of the IC card can be prevented. . Furthermore, since the EPD 11 has a display memory property and the displayed encrypted image is held, the display is erased in response to a transaction signal after the transaction ends. Thereby, it is possible to further prevent the abuse of the IC card.

  As described above, in the present embodiment, the IC card has a configuration including the fingerprint sensor 10 and the EPD 11. The user can be limited by performing personal authentication of the user of the IC card by the fingerprint sensor 10. Therefore, abuse of the IC card can be prevented. Furthermore, the IC card according to the present embodiment includes not only the above-described personal authentication but also an EPD 11 that displays an encrypted image, and the encrypted image displayed by the EPD 11 can be read by an external device. . Therefore, information communication can be performed between the IC card and the external device through the encrypted image. Therefore, not only security by fingerprint authentication can be obtained, but also information communication can be performed through an encrypted image, so that an IC card having higher security can be realized.

  On the other hand, as means for performing information communication, there is a means for performing information communication electromagnetically via an antenna provided in each of the IC card and the external device. In this embodiment, such electromagnetic means is used. The EPD 11 of the IC card displays the encrypted image and the external device reads the image to perform information communication. Thereby, the user of the IC card can visually confirm whether or not an image is displayed on the IC card, and the external device can read it. On the other hand, visual confirmation cannot be performed in the case of electromagnetic means. Therefore, according to the present invention, the image can be read by the external device after the user visually confirms the presence or absence of the image.

  Further, the EPD 11 can hold an image without applying a voltage thereafter by applying a predetermined voltage to a driving element such as a TFT during a predetermined time. That is, it has an image display memory property and a display memory property. By providing such an EPD 11, power consumption for displaying an image can be reduced, so that low power consumption can be realized and an IC card having display memory properties can be realized.

  Moreover, in EPD11, the image of EPD11 is erase | eliminated after completion | finish of transaction. By erasing the image in this way, the IC card can be invalidated. Thereby, since the afterimage in the EPD 11 can be erased, the abuse of the IC card due to the afterimage can be prevented, and higher security can be realized.

  Further, the encrypted image displayed by the EPD 11 is automatically updated, and when the use of the IC card is terminated, the authentication image used between the external device and the IC card is rewritten. When an IC card is used, an encrypted image once displayed by the EPD 11 or an encrypted image authenticated by an external device can be invalidated. Therefore, each time the IC card is used, the external device authenticates a new and different encrypted image, so that an IC card with higher security can be realized.

Further, since the IC card includes the connection IC terminal 12, information can be transmitted and received between the IC card and the external device through the connection IC terminal 12.
In addition, since the IC card includes a solar cell, the IC card can be driven using power generated by light irradiation. Further, since the solar cell also functions as an optical sensor, an IC card including an optical switch that reacts to light irradiation can be realized.

  In addition, in this embodiment, although the transaction business by ATM in financial institutions, such as a bank, was illustrated and demonstrated, this embodiment does not limit this. The IC card of this embodiment can also be used in transaction business when using a credit card and transaction business in an organization that handles various personal information.

(Second embodiment of IC card)
Next, a second embodiment of the present embodiment will be described.
FIG. 8 is a perspective view of the IC card K3 according to the present embodiment. In this modification, the IC card K3 has a configuration including a membrane switch (selection means) 15.
In the present embodiment, the same components as those in the first embodiment are denoted by the same reference numerals, and the description is simplified.

The membrane switch 15 selects and determines an application that can be used with the IC card K3. A plurality of such applications are displayed on the EPD 11. The application displayed on the EPD 11 is selected and determined using the membrane switch 15.
The membrane switch 15 not only selects and determines an application, but also functions as a switch for switching the IC card K3 from the power-off state (power-off state) to the ON state (power-on state). It is like that.
Such a membrane switch 15 is connected to an IC chip built in the IC card K3. Thereby, the IC chip processes the input signal from the solar cell 14 and supplies the electric energy charged in the charger to the EPD 11.
Further, as will be described below, in the IC card K3 of this embodiment, a multipurpose application can be used by operating the membrane switch 15.

(Multipurpose transaction using IC card)
Next, multipurpose transaction using the above-mentioned IC card will be described.
In the first embodiment described above, the use of an IC card using an ATM transaction service in a financial institution as an application has been described. However, in this embodiment, a plurality of applications can be used with a single IC card. ing. FIG. 9 is a flowchart for explaining the multipurpose transaction.
In the present embodiment, information handled by the IC card K3 is classified into three types. Specifically, it is classified into OPEN information represented by advertising, low confidential information such as name and address, and highly confidential information that may be misused by others. Are handled. And in various information classified in this way, the security in IC card K3 becomes high as confidentiality becomes high.
In the present embodiment, “transaction” not only means communication between an external device and an IC card, but also means that an application is used in a broad sense.
Next, transaction business will be described with reference to the flowchart.

First, the power of the IC card CPU is turned on.
In step S21, when the membrane switch 15 is turned on or the fingerprint sensor 10 is touched, the CPU is turned on.

Next, it is determined whether or not to display OPEN information (step S21).
Here, when the OPEN information is displayed (step S22), the OPEN information is displayed on the EPD 11. The OPEN information may be displayed as a default image of the EPD 11.
On the other hand, when the OPEN information is not displayed, it is determined whether or not the low confidential information is displayed (step S23). Here, when low confidential information is displayed (step S24), information that may be known to others, such as an address and a name, is displayed. By displaying the low confidential information in this way, for example, when the IC card is lost and a third party picks up the IC card, the owner of the IC card can be identified.
On the other hand, when the low confidential information is not displayed, the process proceeds to step S25 and the application to be used is selected.

  Here, the IC card K3 of this embodiment not only uses a transaction application in a financial institution such as a bank, but also functions as a certificate application such as a driver's license, passport, insurance card, and the like. It is also possible to disclose applications such as personal information of owners of

Furthermore, in the IC card K3 of the present embodiment, it is possible to limit users for each of a plurality of applications.
For example, when the application of the IC card K3 is a credit card or a cash card, it is possible to limit the application to be used by only two persons, a husband and a wife.
For example, when the application of the IC card K3 is a driver's license or a passport, it is possible to limit the number of users to one.
For example, when the application of the IC card K3 is an insurance card or a point card for various products, the entire family can use it.
Therefore, in step S25, one of the plurality of applications is selected. Such application selection is performed by turning on one of the membrane switches 15 of the IC card K3.

Next, as shown in FIG. 4, when the user touches the fingerprint sensor 10 with the finger F, fingerprint authentication is performed (step S26).
In step S26, fingerprint authentication is performed by collating the fingerprint touching the fingerprint sensor 10 with the fingerprint of the user of the application selected in step S25.
For example, when the application used is a husband's driver's license, only the husband is determined to be valid by the fingerprint authentication. Therefore, the wife and all other family members cannot use their husband's driver's license.
For example, when the application used is a cash card, only husband and wife are determined to be valid by fingerprint authentication. Therefore, it cannot be used by all other families.
For example, when the application used is a health insurance card, it is determined that the whole family is determined to be valid by fingerprint authentication. Therefore, persons other than the family cannot be used.

Therefore, if the fingerprint set in each application does not match the fingerprint touched by the fingerprint sensor 10 as a result of fingerprint authentication (step S27), authentication is impossible. In this case, a display indicating that authentication is not possible is performed on the EPD 11. Then, the use of the IC card K3 ends.
On the other hand, as a result of fingerprint authentication, when the fingerprint set in each application matches the fingerprint touched by the fingerprint sensor 10, the transaction or information disclosure in the application selected in step S25 is performed.
For example, when the application is a driver's license (CASE 1), the process proceeds to step S28, and the personal information described in the driver's license is displayed (step S28). Here, after the user confirms the display (step S29), the display on the EPD 11 is erased by the input of the membrane switch 15 (step S30). Thereafter, the use of the IC card ends.

On the other hand, if the application selected in step S25 is an application for issuing a certificate such as a resident's card (CASE2), the process moves to step S31, and an encrypted image that can be read by the external device is displayed. .
Then, the encrypted image is read by a reader provided in the external device (step S32). Thereafter, the encrypted image read by the reader is decrypted, and it is determined whether or not the IC card K3 can be used for use authentication (step S33).
Here, when the usage authentication is impossible (step S34), the usage is disabled. In this case, a display indicating that authentication is not possible is performed on the EPD 11. Then, the use of the IC card K3 ends.
On the other hand, if it is available, a certificate is issued (step S35). Subsequently, when the issue ends (step S37), the IC card K3 becomes invalid (step S37). In step S37, the display image displayed by the EPD 11 is deleted. Here, since the EPD 11 has a memory property for storing a display image, if the image of the EPD 11 is not erased, the image remains displayed as it is, and there is a possibility of causing abuse by a third party. In order to avoid such a risk, the display image of the EPD 11 is erased.
Next, the EPD 11 displays a default image (step S38).
When the above series of operations is completed, the use of the IC card K3 is terminated.

In this way, by using the IC card K3, it is possible to handle electronic information that proves that the user is the user himself / herself based on the electronic encryption technology. For example, it can be handled as a certificate that is not easily forged by a third party, such as a passport, a driver's license, or an insurance card. This certificate can store digital information such as the user's public key, user name, certificate issuing institution name, validity period, serial number, and the like. The purpose of use is selected by the membrane switch 15 according to the application, and the electronic certificate is correctly transmitted only during information communication using a pre-specified encrypted image in a specific information terminal organization. .
It is also possible to limit the users for each application, and the user's fingerprint information (authentication fingerprint pattern) may be registered for each usable application. For example, a driver's license or passport can be used only by the person himself / herself.

  As described above, in this embodiment, the user can be limited by performing personal authentication of the IC card user by the fingerprint sensor 10. Therefore, abuse of the IC card can be prevented. Furthermore, the IC card according to the present embodiment includes not only the above-described personal authentication but also an EPD 11 that displays an encrypted image, and the encrypted image displayed by the EPD 11 can be read by an external device. . Therefore, information communication can be performed between the IC card and the external device through the encrypted image. Therefore, not only security by fingerprint authentication can be obtained, but also information communication can be performed through an encrypted image, so that an IC card having higher security can be realized.

  Further, in the present embodiment, a plurality of types of pre-registered applications can be used with a single IC card. Also, the application can be confirmed by the EPD 11. Further, the application to be used can be selected by the membrane switch 15. In addition, user fingerprint information can be registered for each application. And a user can also be limited for every application.

  In addition, this invention is not limited to the said embodiment, Of course, it can change variously in the range which does not deviate from the summary of this invention.

The perspective view which shows the IC card of 1st Embodiment. The top view which shows the IC card of 1st Embodiment. The block diagram which shows the process part which processes the information input from the fingerprint sensor. The schematic diagram which shows the structure of a fingerprint sensor. Sectional drawing which shows the cross section of an electrophoretic display device (EPD). The perspective view which shows the modification of the IC card of 1st Embodiment. The flowchart figure at the time of performing transaction business using the IC card of 1st Embodiment. The perspective view which shows the IC card of 2nd Embodiment. The flowchart figure at the time of performing transaction business using the IC card of 2nd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Fingerprint sensor (capacitance type fingerprint sensor), 11 ... EPD (electrophoretic display device, display element), 12 ... IC terminal for connection (external connection terminal), 13 ... Switch (selection means), 14 ... Solar cell 15 ... Membrane switch (selection means), 40 ... Processing unit (control unit), K1, K2, K3 ... IC card

Claims (9)

A sensor,
A data processing unit for extracting the first information captured by the sensor;
A memory for storing second information;
A control unit that displays an image on a display element based on a comparison result between the first information and the second information;
An antenna for receiving a display end signal for erasing the image after displaying the image;
Including
The control unit has a function of deleting the image, and displays the image on the display element only until the display end signal is received by the antenna. IC card. In the IC card according to claim 1 ,
An IC card, wherein the display element is an electrophoretic display device. In the IC card according to claim 1 or 2 ,
An IC card, wherein the sensor is a fingerprint sensor. In the IC card according to any one of claims 1 to 3 ,
An IC card, wherein the image is an encrypted image. In the IC card according to any one of claims 1 to 4 ,
An IC card, further comprising a solar cell. IC card,
An external device,
A sensor in which the IC card detects the first information, memory and a display device, to detect by Ri said first information to the sensor with the second information stored in the memory for storing the second information A control unit that displays an image on the display element based on a comparison result; and an antenna that receives a display end signal for erasing the image displayed on the display element. It has a function to erase an image, and displays the image on the display element only until the display end signal is received by the antenna.
The external device has a reader for reading the image displayed on the display element;
After the external device reads the image, the display end signal is transmitted to the antenna.
An authentication system characterized by that. In an authentication method using an IC card including a sensor, a data processing unit, a memory, a control unit, a display element, and an antenna, and a reader that reads an image of the display element,
Extracting the first information from the sensor by the data processing unit ;
And comparing the second information stored the first data in said memory by said control unit,
Displaying an encrypted image on the display element according to a result of comparison between the first information and the second information;
Reading the encrypted image with the reader ;
A step of receiving the originating display end signal based on the completion of the reading process by the antenna,
Erasing the display of the encrypted image by the control unit based on the display end signal;
An authentication method comprising: The authentication method according to claim 7 ,
An authentication method, further comprising: after reading the encrypted image, transmitting information on a different encrypted image to the antenna and rewriting the encrypted image. The authentication method according to claim 7 or 8 ,
An authentication method, wherein the sensor is a fingerprint sensor.

Images